@dethos Did you ever try building your #docker image using #guix? These are reproducible by default, without *you* being the one to care about each package version. You just need to note single commit-id. Ludovic Courtès shows this in his FOSDEM talk. You can even travel back in time easily.

(You might even come to the conclusion that you can achieve what you need with much less efford than with docker.)